Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft
File:                     rVwudMbUbMc8mKTBYIeoo7Om91k.mft (raw, json)
Hash identifier:          YIVAlVTSIfo5L3Nzs2loz9cVp51To8GugDT9ZQLQl0o=
Subject key identifier:   ED:08:05:01:AA:E4:03:F4:64:A5:14:E1:AD:0D:7A:84:FF:D3:DF:DD
Authority key identifier: AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59
Certificate issuer:       /CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
Certificate serial:       019FA974FD8229FE0A6A97A3D43CE56E9985
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft
Manifest number:          19E4
Signing time:             Tue 28 Jul 2026 16:00:44 +0000
Manifest this update:     Tue 28 Jul 2026 16:00:44 +0000
Manifest next update:     Wed 29 Jul 2026 16:00:44 +0000
Files and hashes:         1: Rxu6PY6T12eD6Vlw9k60_83v9Nc.roa (hash: j/YK/yQpe4IKOS3k5YPKzOKh1qWi6WCqC8bqntTBlxY=)
                          2: VFU37iQljI79t35JlR-w1IteaQw.roa (hash: J5t9v+o/rmxrY3dLqpHoI3srOK2b8Gw8LuwtD186cUY=)
                          3: gPtYr61h83pA7-mt902KElGDuI0.roa (hash: Kfj49mH4lsVszd4rTCsS6tC3nnBrcy/t3kH2S5AxGGo=)
                          4: nUBRGA1FEWK-usieosyBaTq-H8Q.roa (hash: vDMG9fme7VB9AauE97OnMRGk4k7A0gMGf6ktOmefSMw=)
                          5: rVwudMbUbMc8mKTBYIeoo7Om91k.crl (hash: 9FJJUT5DJ7oGs87kULc5TNcIQTVKOpthUQdZc2QbSIM=)
                          6: sixxThEQTX1zUHOzyF4MB92-RaY.roa (hash: secsUzL3O2X6Ac6rYvaZ+cU3vmetNixtbbwwWKOjrmw=)
                          7: uWkEc-fbIJqw99dNiiEwAeVlWfM.roa (hash: 1DSbIjvJqT3rylhutdS0OLOYTOnrBsAi7+g/hYhs1tM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 16:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:74:fd:82:29:fe:0a:6a:97:a3:d4:3c:e5:6e:99:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759
        Validity
            Not Before: Jul 28 16:00:44 2026 GMT
            Not After : Jul 29 16:00:44 2026 GMT
        Subject: CN=ed080501aae403f464a514e1ad0d7a84ffd3dfdd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e6:ee:5c:1e:dc:a5:66:09:c3:e6:d8:10:99:
                    60:82:8b:07:78:c7:4c:cc:b0:3f:7c:9c:e4:87:87:
                    1b:47:34:5c:fa:9f:fe:2e:64:86:50:59:01:bc:90:
                    6e:e4:b8:7e:5b:0d:cc:3e:0c:e8:61:99:d3:93:1b:
                    04:34:4b:5c:e8:75:f6:8a:dc:e0:6c:46:81:44:f6:
                    4f:aa:f2:2b:dc:1f:85:e1:e4:6f:f9:df:70:8b:cb:
                    f0:30:70:ac:5a:5c:b6:cd:c4:b8:cf:05:c8:56:dd:
                    95:95:f6:ef:eb:19:84:1e:d8:4e:2c:99:c0:ee:9b:
                    a4:28:35:3d:10:e8:19:b4:25:c2:44:54:1a:cd:0f:
                    6a:1f:6f:50:d7:c5:78:c0:6a:74:d6:c7:8f:e2:3e:
                    9b:a3:0f:22:19:de:cf:41:07:64:48:9f:63:f5:ec:
                    22:c1:3a:08:df:33:8a:46:d6:0b:59:51:07:66:2e:
                    ce:f0:23:2b:bd:d6:85:0a:1a:e8:e1:64:cc:cc:dc:
                    c5:65:ff:40:ac:fc:cb:fd:42:6b:f1:63:0e:92:b0:
                    1b:48:52:1e:c9:20:81:b2:9a:a4:22:fa:d5:ac:ab:
                    c3:d0:c8:f4:24:92:8e:b0:ef:7b:69:fc:a8:44:fb:
                    8a:3d:c5:b9:94:b9:46:a5:99:0b:4c:4e:b5:31:65:
                    78:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:08:05:01:AA:E4:03:F4:64:A5:14:E1:AD:0D:7A:84:FF:D3:DF:DD
            X509v3 Authority Key Identifier:
                keyid:AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:01:b1:be:d5:aa:3f:1d:c0:16:6d:ca:4e:ab:2c:65:a6:98:
         20:59:ad:56:4d:15:52:1e:e0:23:9a:f8:61:6f:6e:24:15:62:
         8f:0f:45:5d:86:4d:8d:96:74:d6:4b:06:27:0e:3f:9a:87:ee:
         02:25:7d:f8:aa:ca:eb:ee:34:51:bd:d0:34:f3:a4:46:0f:d8:
         55:f6:2f:53:d1:93:c3:dc:fd:10:8d:58:4d:2b:a5:90:8e:f5:
         de:4a:b8:a9:cb:dc:4b:5b:20:2c:1b:dc:de:0a:c1:27:e4:bc:
         ea:e8:7e:b5:23:b7:16:be:17:a1:d7:a4:86:10:58:87:93:cf:
         ed:bc:95:d4:0a:5a:9c:a3:31:86:da:54:73:7f:e6:22:98:79:
         b1:0e:e8:84:7b:17:14:51:df:d3:c1:3b:1d:20:ae:ca:22:0d:
         ac:fb:67:a3:86:5b:fe:4e:99:58:a7:b0:35:fb:91:39:92:5f:
         61:15:87:17:71:a2:a1:35:75:42:08:43:1e:22:5b:7c:42:56:
         a0:62:28:48:69:a8:45:e1:5a:bc:fc:27:70:03:78:3a:70:32:
         33:c4:ce:3f:4b:d6:d3:32:56:d7:a2:c9:86:a5:06:18:e2:44:
         89:30:15:28:72:f9:a8:59:c9:93:92:f2:53:fc:76:bd:79:2a:
         95:bb:f7:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:52:48 2026 by rpki-client